added browser permissions to manifest trying to get around unsafe protocol error